Privacy Policy sayap33 — Your Information Is Safe With Us

1Introduction and Scope of Privacy Policy

Sayap33 ("we", "Platform" or "sayap33") is fully committed to protecting the privacy and security of the personal information of every member using our platform. This Privacy Policy explains in detail our practices for collecting, processing, storing, and protecting your personal data.

This policy applies to all users who access or use the sayap33 platform via our website, mobile app, or any of our official digital channels. By registering an account or continuing to use the sayap33 platform, you agree to the terms set out in this Privacy Policy.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. If you disagree with any part of this policy, we advise you to discontinue use of our platform and contact our support team for further assistance.

2Types of Personal Data We Collect

Sayap33 only collects data necessary to provide services that are safe, efficient, and compliant with regulatory requirements. The following are the categories of data we collect:

3How We Collect Data

Your personal data is collected through various channels within the sayap33 platform ecosystem:

• Account Registration: When you register a new account, we collect basic information such as your name, email, phone number, and date of birth.
• KYC Verification Process: To comply with legal requirements and ensure platform security, valid identification documents are required during the identity verification process.
• Financial Transactions: Every time you make a deposit or withdrawal, information related to the payment method and transaction amount is securely recorded.
• Platform Usage: Our system automatically logs technical data such as IP addresses, device types, and usage patterns for security and service improvement purposes.
• Customer Support Interactions: Records of conversations and correspondence with our support team are retained for reference and service quality improvement.
• Cookies and Tracking Technologies: Our platform uses cookies and similar tracking technologies to improve user experience — further details in Section 8.

4How We Use Your Data

Sayap33 uses the personal data collected for the following legitimate and transparent purposes:

• Account Management: Creating, maintaining, and securing your account on the Sayap33 platform.
• Payment Processing: Processing deposits, withdrawals, and other financial transactions securely and efficiently.
• Identity Verification (KYC): Meeting regulatory and legal requirements related to member identity verification.
• Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, and other security threats.
• Customer Support: Responding to enquiries, resolving technical issues, and providing the assistance you need.
• Platform Communications: Sending important notifications related to your account, promotions, system updates, and security information.
• Service Improvement: Analysing usage data to improve platform performance, interface design, and game selection.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and offering appropriate assistance.
• Regulatory Compliance: Fulfilling the legal and regulatory obligations applicable to our platform's operations.

5Data Sharing and Disclosure

Sayap33 does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. However, in certain limited and lawful situations, we may share your data with the following parties:

• Payment Service Providers: To process deposits and withdrawals, necessary transaction information is shared with licensed payment processors such as FPX, DuitNow, and e-wallet providers — all subject to strict confidentiality agreements.
• Game Software Providers: Our licensed game providers receive only the minimum data required to deliver a smooth and fair gaming experience.
• Regulatory Bodies and Law Enforcement: When required by law or court order, sayap33 will disclose the necessary information to the relevant authorities.
• Cybersecurity Services: Third-party security providers who assist us in monitoring and protecting the platform from cyber threats — subject to binding data protection agreements.
• Audit and Compliance Firms: To meet internal and external audit requirements, certain non-personally identifiable information may be shared with appointed audit firms.

6Data Security & Protection

Sayap33 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, destruction, or unintentional disclosure:

• 256-bit SSL Encryption: All communications between your device and sayap33 servers are encrypted using the latest bank-grade 256-bit SSL/TLS protocol.
• Stored Data Encryption: Sensitive information such as passwords and financial details are stored in encrypted form using strong hashing algorithms — even Sayap33 staff cannot view your original password.
• Layered Access Control: Only staff who have passed background checks and have a legitimate operational need are permitted to access member data — and every access is audited and recorded.
• Continuous Monitoring: Our security system monitors platform activity 24/7 to detect any anomalies or suspicious access attempts in real time.
• Periodic Security Audits: sayap33 conducts regular penetration testing and security audits by independent security experts to ensure our defences are always up to date.
• Incident Response Plan: We maintain a clear incident response procedure — in the event of any data breach, affected members will be notified within 72 hours along with the protective measures they need to take.

7Data Retention Period

Sayap33 retains your personal data for as long as necessary to fulfil the purposes stated in this policy or as required by applicable law. General data retention guidelines are as follows:

• Active Account Data: Retained for as long as your account is active and for a set period after account closure to meet regulatory requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with legal requirements relating to financial records and anti-money laundering in Malaysia.
• KYC and Identity Verification Records: Retained for 5 years after the account closure date, or longer if required by regulatory authorities.
• Security and Access Logs: Retained for 12 months for digital forensic analysis purposes in the event of a security incident.
• Customer Support Records: Retained for 3 years for service quality reference and improvement.
• Technical Data and Cookies: Depending on the type of cookie — session cookies are deleted when the browser is closed, while persistent cookies are stored for a set period (typically 1 to 2 years).

Upon expiry of the applicable retention period, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

8Cookies and Tracking Technologies

The sayap33 platform uses cookies and similar tracking technologies to enhance user experience, ensure platform security, and analyse usage patterns. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session security, and your basic preferences. These cookies cannot be disabled.
• Performance Cookies: Helping us understand how users interact with the platform — most visited pages, time spent, and errors encountered — so we can continuously improve.
• Functional Cookies: Remembering your preferences such as language, display settings, and game preferences to deliver a more personalised experience.
• Security Cookies: Helping us detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality and user experience of the sayap33 platform. Third-party cookies used by our licensed game and payment providers are also subject to their respective privacy policies.

9Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and sayap33's policies, you have the following rights regarding your personal data:

10Child Protection

The sayap33 platform is exclusively for users who are of age 18 years and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover or become aware that personal data of a minor has been collected without proper age verification, we will promptly take the following steps:

• Immediately suspending the relevant account while an investigation is conducted.
• Permanently deleting all associated personal data from our systems.
• Refunding any available balance upon completion of identity verification.
• Reporting the incident to the relevant authorities where deemed necessary.

If you have reason to believe that a minor has registered an account on sayap33, please contact our support team immediately so we can take the appropriate action.

11Policy Amendments and Updates

Sayap33 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When material amendments are made, we will:

• Updating the "Last Updated" date at the top of this document.
• Notifying all active members via email or in-platform notification at least 14 days before the amendment takes effect.
• Displaying a clear notice on the platform's home page throughout the transition period.
• Retaining archived copies of previous versions of the Privacy Policy for reference for 3 years.

Continued use of the sayap33 platform after the effective date of any amendment is considered your acceptance of the updated terms. If you disagree with the changes made, you have the right to close your account before the amendment takes effect by contacting our support team.

12Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, you may reach us through the following channels:

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 on the sayap33 platform

Our team will respond to all privacy-related enquiries within 3 business days. For official complaints or data rights requests, please provide your account information and a clear description of your request so we can process it more quickly and accurately.